3 ms·
Yes, as far as I understood DH, the symmetrical keys don't have any mathematicial relation to the asymmetrical ones. I guess, the only reliable way is to sign
by k__ 2y ago
Yes, as far as I understood DH, the symmetrical keys don't have any mathematicial relation to the asymmetrical ones.
I guess, the only reliable way is to sign the response, which requires changes to the server
- rocqua 2y agoWhat do you mean? The asymmetric ephemeral keys used in a TLS handhake with Diffie Helman result rather directly into the symmetric session key used by TLS. The signature of the handshake with the certificate links the ephemeral keys to the certificate, and hence the symmetric session key is linked mathematically to the certificate.
- k__ 2y agoWhat I wanted to say is, the session key isn't generated from the private keys of either party. If I sign any data, it's mathematically linked to the certificate, but that doesn't mean the cert was involved in creating the data.